Docs
Get an API key
Flight Webhooks

Rotate the signing secret

POST
/v1/flight/webhook-subscriptions/{id}/rotate-secret

Receive a new signing secret, only in this response. For 24 hours new requests carry a signature for each secret. Keep accepting your previous secret for at least 2 hours 15 minutes, because requests queued before the rotation carry only its signature. Rotating again replaces the previous secret.

Authorization

x-api-key<token>

Your API key. Issued and revoked from the TrustPixel dashboard; the gateway resolves it to an owning organization on every request.

In: header

Path Parameters

id*string
Match^whs_[a-zA-Z0-9-]+$
Lengthlength <= 128

Header Parameters

x-request-id?string

Correlation id echoed to the upstream service and returned on the response. Generated as req_<uuid> when omitted.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/flight/webhook-subscriptions/whs_0192f3a4b5c64d7e8f9a0b1c2d3e4f5b/rotate-secret"
{  "data": {    "id": "whs_0192f3a4b5c64d7e8f9a0b1c2d3e4f5b",    "url": "https://partner.example/hooks/flight",    "event_types": [      "flight.booking.confirmed"    ],    "status": "ACTIVE",    "previous_secret_expires_at": "string",    "created_at": "string",    "updated_at": "string",    "signing_secret": "string"  }}

Delete a subscription DELETE

Delete the subscription and its delivery history. Requests already queued can still arrive.

List a subscription's deliveries GET

The subscription's deliveries, newest first, with `meta.pagination`, each with its event and your endpoint's responses for the current replay. Filter by `status` to find failed or stuck deliveries.